CVE-2026-49486
Published Jun 26, 2026The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `prot_p()`, so although the control channel was TLS-protected the d…
- evidence mentions
- 3
- Buzz score
- 25.4